Troubleshooting hwtacacs configuration, Troubleshooting hwtacacs configuration -28 – H3C Technologies H3C WX3000 Series Unified Switches User Manual

Page 280

Advertising
background image

25-28

z

The device cannot communicate with the RADIUS server (you can determine by pinging the
RADIUS server from the device) — Take measures to make the device communicate with the
RADIUS server normally.

Symptom 2

: RADIUS packets cannot be sent to the RADIUS server.

Possible reasons and solutions

:

z

The communication links (physical/link layer) between the device and the RADIUS server is
disconnected/blocked — Take measures to make the links connected/unblocked.

z

None or incorrect RADIUS server IP address is set on the device — Be sure to set a correct
RADIUS server IP address.

z

One or all AAA UDP port settings are incorrect — Be sure to set the same UDP port numbers as
those on the RADIUS server.

Symptom 3

: The user passes the authentication and gets authorized, but the accounting information

cannot be transmitted to the RADIUS server.

Possible reasons and solutions

:

z

The accounting port number is not properly set — Be sure to set a correct port number for RADIUS
accounting.

z

The device requests that both the authentication/authorization server and the accounting server
use the same device (with the same IP address), but in fact they are not resident on the same
device — Be sure to configure the RADIUS servers on the device according to the actual situation.

Troubleshooting HWTACACS Configuration

See the previous section if you encounter an HWTACACS fault.

Advertising